722a098eac
Test Plan (remains the same): 0) Back up your database 1) Apply all these patches 2) In your mysql client use your Koha database and execute: > DELETE FROM systempreferences; > SOURCE ~/kohaclone/installer/data/mysql/sysprefs.sql; -- Should be no errors. > SELECT * FROM systempreferences LIKE 'GoogleO%'; -- Should see 4 entries. > QUIT; 3) Restore your database 4) Run ./installer/data/mysql/updatedatabase.pl; 5) In your mysql client use your Koha database and execute: > SELECT * FROM systempreferences LIKE 'GoogleO%'; -- Should see the same 4 entries. 6) Log into the staff client 7) Home -> Koha administration -> Global system preferences 8) -> OPAC -- make sure your OPACBaseURL is set (e.g. https://opac.koha.ca) 9) -> Administration -- There should be a 'Google OAuth2' section with the ability to set those 4 system preferences. 10) In a new tab, go to https://console.developers.google.com/project 11) Click 'Create Project' 12) Type in a project name that won't freak users out, like your library name (e.g. South Pole Library). 13) Click the 'Create' button. 14) Click the 'APIs & auth' in the left frame. 15) Click 'Credentials' 16) Click 'Create new Client ID' 17) Select 'Web application' and click 'Configure consent screen'. 18) Select the Email Address. 19) Put it a meaningful string into the Product Name (e.g. South Pole Library Authentication) 20) Fill in the other fields as desired (or not) 21) Click 'Save' 22) Change the 'AUTHORIZED JAVASCRIPT ORIGINS' to your OPACBaseURL. (http://library.yourDNS.org) 23) Change the 'AUTHORIZED REDIRECT URIS' to point to the new googleoauth2 script (http://library.yourDNS.org/cgi-bin/koha/svc/auth/googleopenidconnect) 24) Click 'Create Client ID' 25) Copy and paste the 'CLIENT ID' into the GoogleOAuth2ClientID system preference. 26) Copy and paste the 'CLIENT SECRET' into the GoogleOAuth2ClientSecret system preference. 27) Change the GoogleOpenIDConnect preference to 'Use'. 28) Click 'Save all Administration preferences' 29) In the OPAC, click 'Log in to your account'. -- You should get a confirmation request, if you are already logged in, OR a login screen if you are not. -- You need to have the primary email address set to one authenticated by Google in order to log in. 30) Run koha qa test tools Signed-off-by: Mark Tompsett <mtompset@hotmail.com> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Brendan A Gallagher <brendan@bywatersolutions.com>
213 lines
8.5 KiB
Text
213 lines
8.5 KiB
Text
Administration:
|
|
# Only used internally, omitted: FrameworksLoaded, Version
|
|
Interface options:
|
|
-
|
|
- Use
|
|
- pref: KohaAdminEmailAddress
|
|
class: email
|
|
- "as the email address for the administrator of Koha. (This is the default From: address for emails unless there is one for the particular library, and is referred to when an internal error occurs.)"
|
|
-
|
|
- Use
|
|
- pref: ReplytoDefault
|
|
class: email
|
|
- "as the email address that will be set as the replyto in emails"
|
|
-
|
|
- Use
|
|
- pref: ReturnpathDefault
|
|
class: email
|
|
- "as the return path or bounce address for undeliverable mail messages. If you leave this empty, the From address will be used (often defaulting to the admin address)."
|
|
-
|
|
- Show
|
|
- pref: DebugLevel
|
|
default: 0
|
|
choices:
|
|
0: "no"
|
|
1: some
|
|
2: lots of
|
|
- debugging information in the browser when an internal error occurs.
|
|
-
|
|
- pref: noItemTypeImages
|
|
default: 0
|
|
choices:
|
|
yes: "Don't show"
|
|
no: Show
|
|
- itemtype icons in the catalog.
|
|
-
|
|
- Separate columns in an exported CSV file with
|
|
- pref: delimiter
|
|
default: ","
|
|
choices:
|
|
';': semicolons
|
|
tabulation: tabs
|
|
',': commas
|
|
'/': slashes
|
|
'\': backslashes
|
|
'#': "#'s"
|
|
- by default.
|
|
-
|
|
- pref: virtualshelves
|
|
choices:
|
|
yes: Allow
|
|
no: "Don't allow"
|
|
- staff and patrons to create and view saved lists of books.
|
|
-
|
|
- When editing circulation rules show the
|
|
- pref: DefaultToLoggedInLibraryCircRules
|
|
choices:
|
|
yes: "logged in library's"
|
|
no: "all libraries"
|
|
- rules by default.
|
|
-
|
|
- When editing notices and slips show the
|
|
- pref: DefaultToLoggedInLibraryNoticesSlips
|
|
choices:
|
|
yes: "logged in library's"
|
|
no: "all libraries"
|
|
- notices and slips by default.
|
|
-
|
|
- When editing overdue notice/status triggers show the
|
|
- pref: DefaultToLoggedInLibraryOverdueTriggers
|
|
choices:
|
|
yes: "logged in library's"
|
|
no: "all libraries"
|
|
- rules by default.
|
|
Login options:
|
|
-
|
|
- Automatically log out users after
|
|
- pref: timeout
|
|
class: integer
|
|
- seconds of inactivity. Adding d will specify it in days, e.g. 1d is timeout of one day.
|
|
-
|
|
- pref: AutoLocation
|
|
default: 0
|
|
choices:
|
|
yes: Require
|
|
no: "Don't require"
|
|
- staff to log in from a computer in the IP address range <a href="/cgi-bin/koha/admin/branches.pl">specified by their library</a> (if any).
|
|
-
|
|
- pref: SessionRestrictionByIP
|
|
default: 1
|
|
choices:
|
|
yes: Enable
|
|
no: "Disable"
|
|
- check for change in remote IP address for session security. Disable only when remote IP address changes frequently.
|
|
# PostgreSQL is supported by CGI::Session but not by Koha.
|
|
-
|
|
- Store login session information
|
|
- pref: SessionStorage
|
|
default: mysql
|
|
choices:
|
|
mysql: in the MySQL database.
|
|
Pg: in the PostgreSQL database (not supported).
|
|
tmp: as temporary files.
|
|
memcached: in a memcached server.
|
|
-
|
|
- pref: IndependentBranches
|
|
default: 0
|
|
choices:
|
|
yes: Prevent
|
|
no: "Don't prevent"
|
|
- staff (but not superlibrarians) from modifying objects (holds, items, patrons, etc.) belonging to other libraries.
|
|
-
|
|
- pref: IndependentBranchesPatronModifications
|
|
default: 0
|
|
choices:
|
|
yes: Prevent
|
|
no: "Don't prevent"
|
|
- staff (but not superlibrarians) from viewing and approving/denying patron modification requests for patrons belonging to other libraries.
|
|
CAS authentication:
|
|
-
|
|
- pref: casAuthentication
|
|
default: 0
|
|
choices:
|
|
yes: Use
|
|
no: "Don't use"
|
|
- CAS for login authentication.
|
|
-
|
|
- pref: casLogout
|
|
default: 0
|
|
choices:
|
|
yes: Logout
|
|
no: "Don't Logout"
|
|
- of CAS when logging out of Koha.
|
|
-
|
|
- The CAS Authentication Server can be found at
|
|
- pref: casServerUrl
|
|
SSL client certificate authentication:
|
|
-
|
|
- Use
|
|
- pref: AllowPKIAuth
|
|
default: None
|
|
choices:
|
|
None: "no"
|
|
Common Name: the Common Name
|
|
emailAddress: the emailAddress
|
|
- field for SSL client certificate authentication
|
|
Google OpenID Connect:
|
|
-
|
|
- pref: GoogleOpenIDConnect
|
|
choices:
|
|
yes: Use
|
|
no: "Don't Use"
|
|
- Google OpenID Connect login.
|
|
- You will need to select OAuth2 when creating an app in the google cloud console, and set the web origin to your_opac_url and the redirect url to your_opac_url/cgi-bin/koha/svc/auth/googleopenidconnect .
|
|
-
|
|
- Google OAuth2 Client ID
|
|
- pref: GoogleOAuth2ClientID
|
|
-
|
|
- Google OAuth2 Client Secret
|
|
- pref: GoogleOAuth2ClientSecret
|
|
-
|
|
- Google OpenID Connect Restrict to domain (or subdomain of this domain)
|
|
- pref: GoogleOpenIDConnectDomain
|
|
- . Leave blank for all google domains
|
|
Mozilla Persona:
|
|
-
|
|
- pref: Persona
|
|
default: 0
|
|
choices:
|
|
yes: Allow
|
|
no: "Don't Allow"
|
|
- Mozilla persona for login
|
|
Share anonymous usage statistics:
|
|
-
|
|
- pref: UsageStats
|
|
default: 0
|
|
choices:
|
|
yes: Share
|
|
no: "Don't share"
|
|
- anonymous Koha usage data with the Koha community. You can see the data on the <a href="http://hea.koha-community.org">Hea Koha community website</a>. You have to run misc/cronjobs/share_usage_with_koha_community.pl in a cronjob.
|
|
-
|
|
- The library name
|
|
- pref: UsageStatsLibraryName
|
|
- will be shown on the <a href="http://hea.koha-community.org">Hea Koha community website</a>.
|
|
- If this field is empty data will be sent anonymously.
|
|
- Note that this value has no effect if the UsageStats system preference is set to "Don't share"
|
|
-
|
|
- "The country where your library is located:"
|
|
- pref: UsageStatsCountry
|
|
- This will be shown on the <a href="http://hea.koha-community.org">Hea Koha community website</a>.
|
|
- Note that this value has no effect if the UsageStats system preference is set to "Don't share"
|
|
-
|
|
- The library URL
|
|
- pref: UsageStatsLibraryUrl
|
|
- will be shown on the <a href="http://hea.koha-community.org">Hea Koha community website</a>.
|
|
- Note that this value has no effect if the UsageStats system preference is set to "Don't share"
|
|
|
|
-
|
|
- The library type
|
|
- pref: UsageStatsLibraryType
|
|
default: public
|
|
choices:
|
|
public: "public"
|
|
school: "school"
|
|
academic: "academic"
|
|
research: "research"
|
|
private: "private"
|
|
societyAssociation: "society or association"
|
|
corporate: "corporate"
|
|
government: "government"
|
|
religiousOrg: "religious organization"
|
|
subscription: "subscription"
|
|
- will be shown on the <a href="http://hea.koha-community.org">Hea Koha community website</a>.
|
|
- Note that this value has no effect if the UsageStats system preference is set to "Don't share"
|